France – Software package and information systems – Fourniture et intégration d'une solution logicielle de découverte et de classification automatique de la donnée pour La Poste et sa filiale La Banque Postale

The Digital Work Environment and Collaborative Services Directorate of La Poste and its subsidiary La Banque Postale wish to acquire a software solution for the automatic discovery and classification of data (a solution of the « Data Security Posture Management » type) as part of its cybersecurity strategic plan. The contract is composed of a firm lot which covers the scope of La Banque Postale and an optional lot which covers the scope of La Poste SA. Their contents and the modalities for lifting all or part of the optional lot will be specified later in the consultation documents. The software solution must enable the discovery and classification of unstructured data on the Microsoft 365 environment of La Poste and La Banque Postale (SharePoint, OneDrive, Exchange (Outlook), Microsoft Teams, Yammer, etc) allowing to identify, map and manage sensitive information within the information system in a logic of security and regulatory compliance. The software solution will be accompanied by the following associated services: integration into the information system, parameterization, training, project management, maintenance, user support (IT specialists) etc. The consultation is composed of a single lot. The purchasing group is composed of: - La Poste, - La Banque Postale La Poste acts as the coordinator of the purchasing group. The services of the present contract constitute for the subsidiary La Banque Postale of La Poste (i) an outsourcing arrangement in the sense of the EBA/GL/2019/02 orientations of the European Banking Authority on outsourcing and (ii) an ICT service in the sense of Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on the digital operational resilience of the financial sector. As such, the contract must include enhanced contractual obligations, notably on the aspects of security, confidentiality, subcontracting, monitoring, management and follow-up of the services. By applying for the present contract, the tenderer has taken note that it must comply with the specific requirements related to the said banking regulations.